I did further debugging and I found out that "-d" switch is causing the failure.
./config fips -d ake depend make make test This will cause the ecdsatest to fail. From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Santhosh Kokala Sent: Wednesday, February 13, 2013 3:43 PM To: openssl-users@openssl.org Subject: ecdsatest fails on Openssl 1.0.1c Hi, I am compiling FIPS capable Openssl using FIPS object module openssl-fips-2.0.2 and openssl -1.0.1c. After building FIPS object module and Openssl, when I run "make test" inside openssl directory ecdsatest fails. Can someone please let me know how to fix this issue? My configure command ./config fips --with-fipsdir=/u/common/fips/usr/local/ssl/fips-2.0 no-camellia -d -g3 -gdwarf-2 -ggdb -DMEM_MINIMIZE shared -DPURIFY -DOPENSSL_NO_BUF_FREELISTS -DOPENSSL_NO_TLS1_2_CLIENT Errors: ../util/shlib_wrap.sh ./ecdsatest some tests from X9.62: testing prime192v1: .... ok testing prime239v1: .... ok testing c2tnb191v1: .... ok testing c2tnb239v1: .... ok testing ECDSA_sign() and ECDSA_verify() with some internal curves: secp160k1: ........ ok secp160r1: ........ ok secp160r2: ........ ok secp192k1: ........ ok secp224k1: ........ ok secp224r1: ........ ok secp256k1: ........ ok secp384r1: ........ ok secp521r1: ........ ok prime192v1: ........ ok prime192v2: ........ ok prime192v3: ........ ok prime239v1: ........ ok prime239v2: ........ ok prime239v3: ........ ok prime256v1: ........ ok sect163k1: ........ ok sect163r1: ........ ok sect163r2: ........ ok sect193r1: ...ecdsatest: bn_lib.c:243: BN_clear_free: Assertion `(_bnum2->top == 0) || (_bnum2->d[_bnum2->top - 1] != 0)' failed. Santhosh
